stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


Spams, Phishing, and Trojans







Spams, Phishing, and Trojans

Spams, Phishing, and Trojans 05/05/2004 02:36 AM

This Netcraft article titled Phisher Kings compares growth of phishing with that of spamming (via Paymen ts News).  It's not surprising to me since I think phishers who rely mostly on social engineering used to be spammers.  However, phishers using trojans, like the one described in this Code Fish Spam Watch article, are not.  They are hackers using e-mail to find their victims.

Using trojans to harvest passwords and credit card numbers is, fortunately, not as deadly as it might seem at first glance.  Why?  Because trojans require more technical knowledge, higher cost of maintenance, and higher cost of labor necessary to mine the returned data.  It's all glory and little in return.

In comparison, phishers with spamming background tend to focus on what really matters, the ROI numbers.  Instead of wasting days and weeks to write and finetune trojans, they use a web page editor to create their lures and receive their loots in ready to use form.

There is a more dangerous group of potential phishers we need to keep an eye out for: telemarketers.  While most spammers operate blindly, telemarketers leverage information to choose and attack their victims more intelligently.  Phishers with telemarketing background are more likely to be spear-phishers, phishers who target rich victims with tailored attacks.

When they come for you, they will know your name, where you live, what finanicial services you are using, and more.




This is a GrokNews Entry: (what is grok?)





Similar Items

Spams, Phishing, and Trojans

Grok Headline matches for Spams, Phishing, and Trojans

Anti-Phishing Toolbar Available. How to
Avoid Bank and Ebay Phishing Scams


Anti-Phishing Toolbar Available. How to
Avoid Bank and Ebay Phishing Scams
12/30/2004 07:54 PM
Tech-Recipes Dec 30 2004 11:09PM GMT

500 Comment Spams


500 Comment Spams 03/14/2005 05:09 PM

Due to waking up to 500 comment spams, comments are for registered users only. If you've ever registered at a Drupal site before, use the format "user@www.thatserver.com" and it will use your account from there. If not, all you need are a pair of eyes and a valid email address and you're in. No big form of information.

Sorry, but deleting that many comments sucks in any CMS.


Those trojans know how to screw.......


Those trojans know how to screw....... 04/20/2004 02:00 PM
up a perfectly running computer and make me waste three hours getting rid of the damn thing! What? You thought...

Of Trojans and Horses


Of Trojans and Horses 04/10/2004 02:18 AM
So a proof of concept Mac specific trojan has been created. Find it on Google Groups. Here's the problem. A Mac file can have...

One in three PCs hosts spyware or
Trojans


One in three PCs hosts spyware or
Trojans
06/16/2004 07:02 AM
vnunet.com Jun 16 2004 11:03AM GMT

Worms turn as Trojans take over


Worms turn as Trojans take over 01/05/2005 08:31 AM
Personal Computer World Jan 5 2005 12:48PM GMT

Distributed trojans (not that kind)


Distributed trojans (not that kind) 12/08/2003 03:36 PM
Peer-to-peer networks are the next big thing for virus writers, as profit becomes the first and foremost motivation for malware writers.

Esther Dyson Spams


Esther Dyson Spams 12/07/2003 02:59 PM
Should I be honored? "You received this message because you are an industry insider or have expressed interest in hearing from us. If you wish to be removed from our list please e-mail us at unsubscribe@edventure.com and we will not write to you again." Bullshit. Oh, and get this post scriptum: "Sign up today and take advantage of the early registration fee of $3595." Thanks, Esther - I'll pass on this one....

Protect Your PC from Spyware and Trojans


Protect Your PC from Spyware and Trojans 07/13/2004 03:44 AM
PC Tools has released Spyware Doctor v2.0, a powerful Windows spyware detection and removal utility that cleans thousands of potential Spyware, Adware, Trojans, Keyloggers, Spybots, and tracking threats from your PC. [PRWEB Jul 13, 2004]

Telco Spams and Gets Huge Fine


Telco Spams and Gets Huge Fine 03/19/2005 03:08 AM
Slashdot Mar 17 2005 12:47PM GMT

AOL Blocks 5 Billion Spams in 2003


AOL Blocks 5 Billion Spams in 2003 01/03/2004 07:12 AM
I don't care who you are 5 Billion is a big number. Just think of the lost bandwidth deleting all...

Comment Spams Straining Servers Running
MT


Comment Spams Straining Servers Running
MT
12/19/2004 03:51 PM
Slashdot Dec 18 2004 10:24PM GMT

EarthLink finds rampant spyware, trojans


EarthLink finds rampant spyware, trojans 04/15/2004 06:33 PM
Internet service provider EarthLink and Webroot Software released a report on Thursday that said an average of almost 28 spyware programs are running on each computer. More serious, Trojan horse or system monitoring programs were found on more than 30 percent of all systems scanned, raising fears of identity theft.

New Adware Spams Instant Messenger
Buddies


New Adware Spams Instant Messenger
Buddies
02/11/2004 05:44 PM
The ongoing saga of adware companies sneaking in annoying terms of service clauses where you (because you, like everyone else, didn't read the terms of service) agree to let them spam everyone you know, has now expanded to instant messaging technologies. Last night, I received an IM from an acquaintance who is on my AIM buddy list, apologizing if I had received an IM from him with a link to some game (I hadn't). I didn't think much of it, but today reports are appearing that it's the latest adware trick. Some company is offering a silly downloadable game, but hidden in the terms of service is the fact that they're going to IM everyone in your buddy list with a link to the game as well, and continue on the annoying process. AOL is apparently unhappy that someone other than themselves is using AIM for annoying advertisements, and are saying they may take legal action against the company.

Italian gov text spams entire country


Italian gov text spams entire country 06/14/2004 06:32 AM
Berlusconi orders mass SMS election call

Drive-by Trojans exploit browser flaws


Drive-by Trojans exploit browser flaws 03/23/2005 12:46 PM
Analysis Is Firefox really more secure than IE?

British teen spams former bosses, gets
arrested


British teen spams former bosses, gets
arrested
07/14/2004 01:28 PM
Upset about being fired, he sends millions of messages to his former employer, bringing down the company's Web site.

EarthLink uncovers rampant spyware and
trojans


EarthLink uncovers rampant spyware and
trojans
04/16/2004 08:56 AM
Computer Weekly Apr 16 2004 1:05PM GMT

- Internet Meter-Rate System to Reduce
Spams


- Internet Meter-Rate System to Reduce
Spams
07/25/2004 07:21 AM
Hankooki Jul 25 2004 11:45AM GMT

Win DRM hides malicious trojans, RIAA
deploys infected music on P2P


Win DRM hides malicious trojans, RIAA
deploys infected music on P2P
12/30/2004 04:48 PM
Cory Doctorow: According to PCWorld and TechDirt, Windows DRM contains a flaw that allows for attakcers to create music files that contain trojans that attack your computer when you play them, and moreover, the usic industry has hired a company called Overpeer to flood the P2P networks with infected fake music files.
Overpeer is the same company that the recording industry has hired in the past to dump fake versions of songs on file sharing networks. What the article doesn't answer is whether or not the industry hired Overpeer to dump spyware on the network as well, but it's likely they're pleased either way. Overpeer defends their actions by saying that anyone obviously deserves what they get because, obviously, they were looking for unauthorized files. It's not clear that everyone would agree. Sneaking malicious files onto someone's computer because "they deserved it!" doesn't seem like a very good justification. What may be even more important to this story, however, is the revelation of just how easy it is, thanks to a huge loophole in Microsoft's copy protection technology, to include a malicious file with an audio or video file. Basically, because Windows DRM needs to look for a license, all anyone needs to do is point that license to a website that loads malicious content and off you go. Thank you Microsoft, for creating a huge loophole that will probably make sure millions of new computers are loaded with spamming, DDOSing trojans shortly.
Link (Thanks, Alex!)

RIAA/MPAA Contractor Deploys Malicious
Adware Trojans


RIAA/MPAA Contractor Deploys Malicious
Adware Trojans
12/31/2004 04:34 PM
Slashdot Dec 31 2004 8:10PM GMT

Italy's premier Berlusconi SMS-spams
voters' mobile phones


Italy's premier Berlusconi SMS-spams
voters' mobile phones
06/12/2004 01:45 AM
Italy's Berlusconi government spammed the cellphones of millions of citizens with text-messages about voting procedures for tomorrow's EU and local elections. Some call it an unprecedented invasion of mobile privacy for political control. Others argue it's a smart way for the administration to ensure Italy's voting public gets out the vote. Either way, unsolicited text messages don't grow on trees -- the stunt cost around $7M US, and critics want to know who paid for it.
The message, received on cell phones on Thursday and Friday, carried the sender line of the Presidency of the Council of Ministers, Premier Silvio Berlusconi's office. The message detailed when the polls will be open and what documents citizens need to vote.

"Finally we have recourse to a tool like the text message that is now in everyday use to bring the state closer still to its citizens," said Technology Minister Lucio Stanca. But the political opposition branded the strategy as a political tactic. The government "is trying every subterfuge to recover votes. It's alarming that privacy is violated in such a sensational way," said opposition lawmaker Francesco Martone.

Link

Anti-Spam - Fight Back Against Spammers
junk unsolicited unwanted bulk huge
commercial email spams e-mail! FREE


Anti-Spam - Fight Back Against Spammers
junk unsolicited unwanted bulk huge
commercial email spams e-mail! FREE
04/24/2004 11:48 AM
Anti-Spam - Fight Back

spampoison.com
track this site | 5 links


Gone Phishing


Gone Phishing 01/25/2004 09:50 PM

Phishing for the end


Phishing for the end 08/17/2004 04:56 PM
"This site was created with one goal; to create the most comprehensive online archive of information and digital photos of the Coventry Vermont Phish show, August 14th and 15th 2004." Seems odd to think folks went to the trouble of dedicating an entire website to just a single concert, until you learn it was the very last one for Phish.

Phishing and Bouncing


Phishing and Bouncing 09/12/2004 12:36 PM

Looks like the trick of using redirection CGIs at popular website (described in Phishing with Google) is getting popular among phishers. I just got a couple that uses AOL's redir-complex CGI at:

http://r.aol.com/cgi/redir-complex?url=whereever

Note that phishers can use not just the redirecting CGIs, but also those CGIs that use return URL as parameters.  In fact, these types of CGIs are popular among financial institutions and single-sign on services.  For example, both Passport and 3D-Secure uses them.


Phishing behind Google


Phishing behind Google 08/28/2004 01:03 AM

I just received a phishing email purporting to be from PayPal.  No surprise there since I get many of them everyday, but I looked closer at this one because it looked very professionally done.  I looked at the raw message and found this odd link:

This particular phisher is bouncing off Google to hide itself from domain name-based phishing detectors and scanners.  Clever.  Clicking on the link will open a browser to Google's URL search CGI which will automatically redirect the browser to the phishing site at IP address 209.152.181.10.  This trick will bypass phishing detectors that examines only the domain name part of a URL to see if it looks suspicious.

So the lesson here for security developers is to look at all the parameters and to keep track of oh-so-helpful redirectors like Google.  Also, website developers should keep in mind that helpful service is helpful to all, including the bad guys, and they might become an unwitting partner in crime.  For lawyers, it's a new source of income concern.


Phishing for Opera (GM#007-OP)


Phishing for Opera (GM#007-OP) 06/03/2004 12:03 PM
GreyMagic Software (Jun 03 2004)

War Against Phishing Continues


War Against Phishing Continues 03/14/2005 04:32 PM
Phishers and other online scammers are well ahead of law enforcement officials and security experts right now in terms of techniques and tactics.

The future of phishing


The future of phishing 04/29/2004 10:42 AM
vnunet.com Apr 29 2004 2:09PM GMT

eBay Goes Phishing


eBay Goes Phishing 01/03/2005 12:35 PM
The popular online auction site rolls out a new approach in tackling account hackers: cut bait.

Political Phishing


Political Phishing 08/03/2004 12:32 PM
It's election season, and that means that, just like with all the other news-sensitive scams, phishers are getting political. The latest is a phishing email that simply copied a donation request from the John Kerry campaign, but changed the link to a fake site. Of course, the folks behind the scam made one very stupid mistake: remotely using an image hosted on the Kerry website -- which was quickly changed by the campaign to explain that the site was a scam (though, it's likely this confused some people -- hopefully enough to stop them from donating). Still, it's likely that the next version won't make the same mistake. With the success phishing emails have had lately, and the fervor with which people seem to be donating to campaigns, an awful lot of cash supposedly going to campaigns is going to be making criminals wealthy.

Do-it-yourself phishing kits appear on
web


Do-it-yourself phishing kits appear on
web
08/21/2004 04:39 PM
Personal Computer World Aug 21 2004 8:48PM GMT

DIY phishing kits hit the Net


DIY phishing kits hit the Net 08/19/2004 05:48 AM
My little fraudster

IE bug provides phishing tool


IE bug provides phishing tool 12/10/2003 05:50 AM
ZDNet UK Dec 10 2003 5:09AM ET

Phishing on the rise in U.S


Phishing on the rise in U.S 06/15/2004 02:57 PM
ZDNet Jun 15 2004 5:56PM GMT

Best news in the war on spam: phishing


Best news in the war on spam: phishing 05/24/2004 03:10 AM
Boston Globe May 24 2004 6:25AM GMT

Crooks Are Phishing For Your Life


Crooks Are Phishing For Your Life 05/19/2004 04:15 PM
CBS News May 19 2004 8:20PM GMT

Phishing to cost SA millions'


Phishing to cost SA millions' 05/18/2004 10:36 PM
Sunday Times South Africa May 19 2004 2:49AM GMT
Grok Description matches for Spams, Phishing, and Trojans
GrokA matches for Spams, Phishing, and Trojans

Spams, Phishing, and Trojans

The following phrases have been identified by the grok system as matching this entry:

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

Electronic Voting
Hearings Set to
Start (AP)

Hourglass figure
fertility link

House price rise
continues apace

Parents voice fears
over 3G phones

Council 'shake-up'
proposed

Porton Down death
inquest to open

Protesters defy
rebel strongman

Football: Chelsea
Euro preview

Easyjet sees
half-year losses dip

Expert fights horse
cloning ban

Sony Unveils Music
Service, Mulls 'iPod
Killer'

Confluence 1.0.3
Virtualmin 1.91
As Energy Thieves
Turn Crafty, Utility
Turns Up Battle of
Wits

A broadband
broadside

NT government
reeling as Sasser
goes bush

EITO shares vision
for Australian ICT
sector

U.S. Troops to Lift
Cordon Around
Northwest Falluja

U.S. to Ease
Overcrowding at Iraq
Prison -Report

Programming
languages and
security top
academic discussions
at Microsoft
Academic Days

Microsoft taps
IronPort in spam
fight

Microsoft details
home computing

Computer glitch
allows drivers to
gas up for free

Microsoft touts
gadget 'experience'

Internet2 Land Speed
Record Set

WinHEC 2004: Jim
Allchin Keynote
Transcript

Microsoft to
recommend 4-6GHz PC
for Longhorn

Disney buries
Moore's new movie to
save its tax-breaks

Camera-phone barcode
reader

Apple deleting
criticism on 15"
PowerBook issue

Top Tip: Outlook
won't connect!

Sun Microsystems
Opens Smart-Tag
Plant (AP)

There's Been A
Misunderstandment

U.S. to Ease
Overcrowding at Iraq
Prison -Report
(Reuters)

Shi'ite Militia
Battles U.S.-Led
Forces in Kerbala
(Reuters)

Make Love, Not War
What would Jesus
download?

Never a right time
to tax Internet

MSN Messenger
Version 4.0

Discovery Pushes
Back Date of
'Classic' Maya

National Science
Panel Warns of Far
Too Few New
Scientists

Star Wars Galaxies
Defamer
Beyond3D - Which was
nice.

'Sasser' Worm
Strikes Hundreds of
Thousands of PCs

John Gorenfeld's
weblog

Sky Lopez - Vivid's
Sky Lopez

vivid pornstar sky
lopez picture
galleries

enrich his friends
BBC NEWS | Americas
| Bush under fire
from US ex-envoys

what is grok?